github.com/gtsteffaniak/filebrowser vulnerabilities (Go)

5 vulnerabilities.

• github.com/gtsteffaniak/filebrowser Go FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks GHSA-r4v7-6wcg-ghj5 Fix available 6.5 MediumJune 25, 2026
• github.com/gtsteffaniak/filebrowser Go FileBrowser Quantum: unauthenticated user share share info CVE-2026-46410 Fix available 8.7 HighMay 19, 2026
• github.com/gtsteffaniak/filebrowser Go FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) GHSA-mmpx-jh39-wrv6 Fix available 5.4 MediumMay 7, 2026
• github.com/gtsteffaniak/filebrowser Go FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion CVE-2026-44542 Fix available 9.1 CriticalMay 7, 2026
• github.com/gtsteffaniak/filebrowser Go FileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse) CVE-2026-30934 Fix available 8.9 HighMarch 9, 2026